Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d8hEvSvu3PmauBjHUUkRvL9PGVA.roa
File: d8hEvSvu3PmauBjHUUkRvL9PGVA.roa (raw, json)
Hash identifier: XjC6a9W/cyYD+0+d4CnAzfeZyvD7+Ooa3z2wqQ4zdzs=
Subject key identifier: 77:C8:44:BD:2B:EE:DC:F9:9A:B8:18:C7:51:49:11:BC:BF:4F:19:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FDD68FB218064F200C73374FB9647B484
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d8hEvSvu3PmauBjHUUkRvL9PGVA.roa
Signing time: Fri 07 Aug 2026 18:07:52 +0000
ROA not before: Fri 07 Aug 2026 18:07:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219521
IP address blocks: 31.58.246.0/24 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:68:fb:21:80:64:f2:00:c7:33:74:fb:96:47:b4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 7 18:07:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77c844bd2beedcf99ab818c7514911bcbf4f1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:52:59:d8:84:e6:a2:b3:32:e0:39:16:77:
98:19:c2:7b:89:cc:d7:25:bb:95:ac:42:a8:a9:d1:
5f:fb:d7:2d:8d:36:81:40:00:0a:2d:92:0c:2f:2b:
f9:34:76:e3:0b:61:63:b3:79:dc:14:1f:14:6d:ac:
d8:98:be:89:40:d8:b6:ee:35:b7:cd:69:0b:bb:78:
eb:cc:f7:b6:21:64:23:91:de:12:e7:16:5a:e4:e4:
d3:7e:8c:98:d8:3b:7c:fe:77:0f:0e:53:8c:21:17:
a4:d0:24:ad:45:df:01:2d:a5:65:aa:75:f4:e6:ed:
4c:f5:f8:92:08:69:01:e2:18:80:68:25:ae:9b:47:
01:a9:e6:a0:a4:59:29:dd:db:e4:f7:c3:ca:d8:81:
3c:a9:16:4b:76:b0:a8:e2:90:bd:55:c7:ad:5b:22:
14:7d:a2:a5:6d:ed:a9:9a:44:51:cb:67:e7:d8:97:
c7:09:db:27:cf:cd:16:f9:27:f0:50:cc:16:e5:c9:
42:4b:0e:23:cc:ee:8f:3f:20:5f:a4:74:ab:79:99:
26:29:fc:d5:9b:25:a0:e3:91:66:77:51:20:ba:0a:
7f:77:62:56:aa:70:6a:f2:4b:28:5b:7d:a6:2b:d7:
14:fd:6b:55:bd:9b:d7:9f:a5:bb:24:21:0a:19:0d:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:44:BD:2B:EE:DC:F9:9A:B8:18:C7:51:49:11:BC:BF:4F:19:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d8hEvSvu3PmauBjHUUkRvL9PGVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.246.0/24
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ec:d0:de:77:1a:04:07:b7:d5:cc:4a:f0:cb:a6:22:9e:02:
f2:ae:93:3a:a1:95:d0:cb:69:17:50:e7:d2:2e:12:02:c7:56:
7f:9b:1a:4b:fe:f2:d3:e5:ad:7c:08:ab:17:ed:7a:bf:64:50:
5c:9a:b2:1a:a5:17:7f:f0:f6:58:6c:49:37:88:a2:7f:80:81:
fd:a6:84:42:b5:55:b0:c0:c6:2c:e7:87:62:6c:49:16:39:83:
33:8e:08:10:eb:f0:8f:71:63:57:d1:f6:41:e5:89:88:d0:8a:
dd:bf:a5:b0:f0:f1:a1:df:32:27:46:9d:d5:17:23:37:5e:33:
48:5b:c7:61:67:91:37:70:73:3f:8f:ab:cf:8e:dc:63:03:e9:
a7:1a:73:ea:c7:35:5f:a9:cb:63:02:50:91:42:35:5c:ef:84:
d2:3c:5c:19:dc:74:a1:ce:75:c2:c1:25:2e:0f:dd:ea:f7:48:
ba:15:27:82:5d:46:b5:ef:59:63:26:72:64:d7:6f:b5:f3:ab:
de:72:15:0e:49:5d:a4:9e:0e:d1:60:db:4c:9a:67:dc:29:ee:
68:86:8c:dc:fe:7f:2d:08:89:69:f8:44:98:f0:3d:8a:fc:8d:
74:1d:6e:6e:67:d0:57:64:c5:cd:f3:2d:fa:bf:df:21:89:10:
31:d9:09:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/daPshgGTyAMczdPuWR7SEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODA3MTgwNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2M4NDRiZDJiZWVkY2Y5OWFiODE4Yzc1MTQ5MTFiY2JmNGYxOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYlSWdiE5qKzMuA5FneYGcJ7iczX
JbuVrEKoqdFf+9ctjTaBQAAKLZIMLyv5NHbjC2Fjs3ncFB8UbazYmL6JQNi27jW3
zWkLu3jrzPe2IWQjkd4S5xZa5OTTfoyY2Dt8/ncPDlOMIRek0CStRd8BLaVlqnX0
5u1M9fiSCGkB4hiAaCWum0cBqeagpFkp3dvk98PK2IE8qRZLdrCo4pC9VcetWyIU
faKlbe2pmkRRy2fn2JfHCdsnz80W+SfwUMwW5clCSw4jzO6PPyBfpHSreZkmKfzV
myWg45Fmd1Egugp/d2JWqnBq8ksoW32mK9cU/WtVvZvXn6W7JCEKGQ3IyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHfIRL0r7tz5mrgYx1FJEby/TxlQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZDhoRXZTdnUzUG1hdUJqSFVVa1J2TDlQR1ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzr2AwQA
2Ty7MA0GCSqGSIb3DQEBCwUAA4IBAQBH7NDedxoEB7fVzErwy6YingLyrpM6oZXQ
y2kXUOfSLhICx1Z/mxpL/vLT5a18CKsX7Xq/ZFBcmrIapRd/8PZYbEk3iKJ/gIH9
poRCtVWwwMYs54dibEkWOYMzjggQ6/CPcWNX0fZB5YmI0Irdv6Ww8PGh3zInRp3V
FyM3XjNIW8dhZ5E3cHM/j6vPjtxjA+mnGnPqxzVfqctjAlCRQjVc74TSPFwZ3HSh
znXCwSUuD93q90i6FSeCXUa171ljJnJk12+186vechUOSV2kng7RYNtMmmfcKe5o
hozc/n8tCIlp+ESY8D2K/I10HW5uZ9BXZMXN8y36v98hiRAx2Qmp
-----END CERTIFICATE-----
Generated at Sun Aug 16 22:14:04 2026 by rpki-client